Privacy policy

Who we are #

GetGymPOS ("we", "us") provides hosted point-of-sale and membership software for gyms and studios and operates getgympos.com. For this website and for our own customer records we are the data controller. For the member data a gym stores in GetGymPOS, the gym is the controller and we process it on the gym's instructions.

What we collect #

• Forms: name, phone or WhatsApp number, email, gym name, country, gym type, member count and your message.
• Campaign data: the UTM, gclid, fbclid or msclkid parameters in the link you arrived from, kept in your browser and sent with forms so we know which campaign worked.
• Device settings: your theme, colour, country and accessibility choices, stored in your browser only.
• Analytics (only with consent): pages viewed and general device information.
• Account data (customers): business details, users, and billing records.
• Gym data (customers): members, sales, products and staff that the gym enters.

How we use it #

• To reply to enquiries and book demos.
• To provide, secure and support the software.
• To bill customers and keep tax records.
• To understand which pages help, if you allow analytics.

We do not sell personal data and do not use gym member data for our own marketing.

Who we share it with #

Service providers that help us run the business, under contract: website hosting and spam protection (Cloudflare, including Turnstile), our CRM (GoHighLevel) for enquiries, an internal team notification channel, email delivery, and server hosting for the software. Card payments made by a gym's members go to the gym's own payment processor, not to us.

How long we keep it #

Enquiries: up to 24 months after our last contact. Customer account and billing records: as long as tax law requires (typically 5–7 years depending on the country). Gym data: for the life of the account plus a 30-day grace period after cancellation, then deleted from live systems; backups roll off within a further 30 days.

Your rights #

Depending on where you live you may ask to access, correct, delete or export your data, or object to certain uses. California residents have rights under the CCPA/CPRA, including to know, delete and correct, and not to be discriminated against for using them; we do not sell or share personal information for cross-context behavioural advertising. UAE residents have rights under the Personal Data Protection Law (Federal Decree-Law No. 45 of 2021). Make a request through the data request page.

Members of a gym that uses GetGymPOS should contact the gym first; we help the gym respond.

Security #

HTTPS everywhere, role-based access and daily backups. See security and data. No method is perfectly secure; we will notify affected customers of a breach as required by law.

Cookies #

See the cookie policy. Analytics run only after you allow them.

Children #

This website is for businesses and is not directed at children. Gyms that record child members (for example in martial-arts classes) are responsible for parental consent.

International transfers #

Our providers may process data outside your country. We use providers with appropriate safeguards and contractual protections.

Changes and contact #

We update this policy when our practices change and show the date at the top. Contact us through the contact page or the data request page.